5606 matches found
Microsoft .NET Framework ASLR Security Bypass (MS15-118: CVE-2015-6115)
A security feature bypass vulnerability exists in Microsoft .NET Framework. The vulnerability is due to a DLL file that was not compiled with Address Space Layout Randomization ASLR enabled. A remote attacker can exploit this vulnerability by enticing a target user to open a crafted document that...
Microsoft Windows Win32k 特权提升漏洞( MS15-010)
来源链接：http://www.freebuf.com/vuls/90501.html FreeBuf黑客与极客（FreeBuf.COM） 原文地址：http://hdwsec.fr/blog/CVE-2015-0057.html，编译/FB小编鸢尾 概述 这是一个use-after-free内核漏洞，它能获取一个专属的write primitive操作，之后侵染临近的一个对象。这个yields语句可以在内核空间或者用户空间随意写入。...
Windows kernel vulnerability MS15-0 1 0/CVE-2 0 1 5-0 0 5 7 analysis and use with the EXP-a vulnerability warning-the black bar safety net
Description Back in 2 0 1 5 early Udi Yavo1found that one affects Windows XP to Windows 1 0previewof the Windows kernel vulnerability, the following two article on the CVE-2 0 1 5-0 0 5 7 analysis of the article, we can refer to one of the two: 1. FireEye described some technical details about th...
CVE-2015-8579
Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...
CVE-2015-8578
AVG Internet Security 2015 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...
Design/Logic Flaw
Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...
CVE-2015-8577
The Buffer Overflow Protection BOP feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute RWX permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection...
Buffer overflow
The Buffer Overflow Protection BOP feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute RWX permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection...
Design/Logic Flaw
AVG Internet Security 2015 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...
CVE-2015-8579
Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...
CVE-2015-8579
The CVE targets Kaspersky Total Security 2015 (version 15.0.2.361). The vulnerability arises from memory allocations that use Read, Write, Execute (RWX) permissions at predictable addresses while protecting user‑mode processes. This root cause enables bypass of DEP and ASLR protections. Details a...
CVE-2015-8578
AVG Internet Security 2015 is affected by an information disclosure/vulnerability where memory is allocated with Read, Write, Execute (RWX) permissions at predictable addresses when protecting user‑mode processes. This RWX/predictable-address pattern enables bypassing DEP and ASLR protections via...
CVE-2015-8578
AVG Internet Security 2015 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...
CVE-2015-8577
The Buffer Overflow Protection BOP feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute RWX permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection...
CVE-2015-8577
Summary: CVE-2015-8577 affects McAfee VirusScan Enterprise prior to 8.8 Patch 6. The vulnerability lies in the Buffer Overflow Protection (BOP) feature, which allocates memory with Read/Write/Execute (RWX) permissions at predictable addresses on 32‑bit systems while protecting another application...
CVE-2015-8577: Undefined Security Weakness
The Buffer Overflow Protection BOP feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute RWX permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection...
CVE-2015-8579: Undefined Security Weakness
Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...
CVE-2015-8578: Undefined Security Weakness
AVG Internet Security 2015 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...
PT-2015-3025
Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions prior to 8.8 Patch 6 Description The issue is related to the Buffer Overflow Protection BOP feature, which allocates memory with Read, Write, Execute RWX permissions at predictable addresses on 32-bit...
PT-2015-3026
Name of the Vulnerable Software and Affected Versions AVG Internet Security version 2015 Description The issue allows attackers to bypass the DEP and ASLR protection mechanisms. This is due to the allocation of memory with Read, Write, Execute RWX permissions at predictable addresses when...